Главная   Изменения   Спек   Патчи   Sources   Загрузить   Gear   Bugs and FR  Repocop 

Name: openssh
Version: 5.0p1
Release: alt3

Summary: OpenSSH free Secure Shell (SSH) implementation
License: BSD-style
Group: Networking/Remote access
Url: http://www.openssh.com/portable.html
Packager: Dmitry V. Levin <ldv at altlinux.org>

Source: ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-%version.tar

Source1: ssh-copy-id.tar
Source2: http://www.openssh.com/faq.html
Source3: CHANGES
Source4: README.ALT

Source11: ssh-askpass.sh
Source12: ssh-askpass.csh
Source13: sftp.control
Source14: sshd.pamd
Source15: sshd.init
Source16: rescp
Source17: ssh-agent.sh

Patch: openssh-%version-%release.patch

%define _chrootdir /var/empty
%def_with pam_userpass
%def_with libedit

%{expand: %%global _libexecdir %_libexecdir/openssh}
%define _pamdir /etc/pam.d

Obsoletes: ssh

# Because of /etc/syslog.d/ feature.
Conflicts: syslogd < 1.4.1-alt11

Requires: %_chrootdir, syslogd-daemon

# Automatically added by buildreq on Wed Apr 04 2007
BuildRequires: libssl-devel libwrap-devel pam_userpass-devel zlib-devel
%{?_with_libedit:BuildRequires: libedit-devel}

%package clients
Summary: OpenSSH Secure Shell protocol clients
Group: Networking/Remote access
PreReq: shadow-utils
Requires: %name = %version-%release
Obsoletes: ssh-clients, sftp

%package keysign
Summary: OpenSSH helper program for hostbased authentication
Group: Networking/Remote access
Requires: %name-clients = %version-%release

%package server
Summary: OpenSSH Secure Shell protocol daemon
Group: System/Servers
PreReq: %name = %version-%release, chkconfig, control, coreutils, shadow-utils
Obsoletes: ssh-server

%package askpass-common
Summary: OpenSSH common passphrase dialog infrastructure
Group: Networking/Remote access
Requires: %name = %version-%release
Provides: %_libexecdir
Obsoletes: ssh-extras, ssh-askpass, %name-askpass

%description
Ssh (Secure Shell) a program for logging into a remote machine and for
executing commands in a remote machine.  It is intended to replace
rlogin and rsh, and provide secure encrypted communications between
two untrusted hosts over an insecure network.  X11 connections and
arbitrary TCP/IP ports can also be forwarded over the secure channel.

OpenSSH is OpenBSD's rework of the last free version of SSH, bringing it
up to date in terms of security and features, as well as removing all
patented algorithms to seperate libraries (OpenSSL).

This package includes the core files necessary for both the OpenSSH
client and server.  To make this package useful, you should also
install %name-clients, %name-server, or both.

%description clients
Ssh (Secure Shell) a program for logging into a remote machine and for
executing commands in a remote machine.  It is intended to replace
rlogin and rsh, and provide secure encrypted communications between
two untrusted hosts over an insecure network.  X11 connections and
arbitrary TCP/IP ports can also be forwarded over the secure channel.

OpenSSH is OpenBSD's rework of the last free version of SSH, bringing it
up to date in terms of security and features, as well as removing all
patented algorithms to seperate libraries (OpenSSL).

This package includes the clients necessary to make encrypted connections
to SSH servers.

%description keysign
ssh-keysign is used by ssh(1) to access the local host keys and generate
the digital signature required during hostbased authentication with SSH
protocol version 2.  ssh-keysign is not intended to be invoked by the
user, but from ssh(1).  See ssh(1) and sshd(8) for more information about
hostbased authentication.

%description server
Ssh (Secure Shell) a program for logging into a remote machine and for
executing commands in a remote machine.  It is intended to replace
rlogin and rsh, and provide secure encrypted communications between
two untrusted hosts over an insecure network.  X11 connections and
arbitrary TCP/IP ports can also be forwarded over the secure channel.

OpenSSH is OpenBSD's rework of the last free version of SSH, bringing it
up to date in terms of security and features, as well as removing all
patented algorithms to seperate libraries (OpenSSL).

This package contains the secure shell daemon.  The sshd is the server
part of the secure shell protocol and allows ssh clients to connect to
your host.

%description askpass-common
Ssh (Secure Shell) a program for logging into a remote machine and for
executing commands in a remote machine.  It is intended to replace
rlogin and rsh, and provide secure encrypted communications between
two untrusted hosts over an insecure network.  X11 connections and
arbitrary TCP/IP ports can also be forwarded over the secure channel.

OpenSSH is OpenBSD's rework of the last free version of SSH, bringing it
up to date in terms of security and features, as well as removing all
patented algorithms to seperate libraries (OpenSSL).

This package contains OpenSSH passphrase dialog infrastructure.
These dialogs are intended to be called from the ssh-add program and
not invoked directly.

%prep
%setup -q -a1
install -pm644 %_sourcedir/faq.html contrib/faq.html
install -pm644 %_sourcedir/{CHANGES,README.ALT} .
bzip2 -9k ChangeLog

%patch -p1

%build
sed -i 's/-lpam/& -lpam_userpass/g' configure*
sed -i 's/-ledit \+-lcurses/-ledit/g' configure*

export ac_cv_path_LOGIN_PROGRAM_FALLBACK=/bin/login
export ac_cv_path_NROFF=/usr/bin/nroff
export ac_cv_path_PATH_PASSWD_PROG=/usr/bin/passwd
export ac_cv_path_PROG_LASTLOG=/usr/bin/lastlog
export ac_cv_path_xauth_path=/usr/bin/xauth

%configure \
--sysconfdir=%_sysconfdir/%name \
--without-rpath \
--disable-strip \
--with-mantype=doc \
--with-pam \
--with-tcp-wrappers \
--with-ipaddr-display \
--with-privsep-user=sshd \
--with-privsep-path=%_chrootdir \
--with-default-path=/bin:/usr/bin:/usr/local/bin \
--with-superuser-path=/sbin:/usr/sbin:/usr/local/sbin:/bin:/usr/bin:/usr/local/bin \
%{subst_with libedit} \
#

%make_build

%install
%make_install install DESTDIR=%buildroot

mkdir -p %buildroot{%_libexecdir,%_sysconfdir{,/X11}/profile.d}
mkdir -p %buildroot%_sysconfdir/%name/authorized_keys{,2}
install -pD -m600 %_sourcedir/sshd.pamd \
%buildroot%_pamdir/sshd
install -pD -m755 %_sourcedir/sshd.init \
%buildroot%_initdir/sshd
install -p -m755 %_sourcedir/rescp \
%buildroot%_bindir/
install -p -m755 %_sourcedir/ssh-agent.sh \
%buildroot%_sysconfdir/X11/profile.d/
install -pD -m755 %_sourcedir/sftp.control \
       %buildroot%_sysconfdir/control.d/facilities/sftp

sed -i 's, at LIBEXECDIR at ,%_libexecdir,g' \
       %buildroot%_sysconfdir/control.d/facilities/sftp

install -p -m755 contrib/ssh-copy-id %buildroot%_bindir/
install -p -m644 contrib/ssh-copy-id.1 %buildroot%_man1dir/

chmod 711 %buildroot%_sbindir/*

install -p -m755 %_sourcedir/ssh-askpass.{sh,csh} \
%buildroot%_sysconfdir/profile.d/

# Remove unpackaged files
rm %buildroot%_datadir/Ssh.bin

%pre clients
/usr/sbin/groupadd -r -f sshagent

%pre server
/usr/sbin/groupadd -r -f sshd
/usr/sbin/useradd -r -g sshd -d %_chrootdir -s /dev/null -n sshd >/dev/null 2>&1 ||:
%pre_control sftp

%post server
if [ $1 -ge 2 ]; then
/usr/sbin/control-restore sftp
/sbin/service sshd condreload ||:
else
/sbin/chkconfig --add sshd ||:
fi

%preun server
if [ $1 = 0 ]; then
/sbin/chkconfig --del sshd ||:
fi

%triggerpostun server -- openssh < 0:3.0.2p1-alt3
f=%_sysconfdir/%name/moduli
if [ ! -f "$f" ]; then
if [ -f "$f".rpmsave ]; then
%__cp -pf "$f".rpmsave "$f"
elif [ -f "$f".rpmnew ]; then
%__cp -pf "$f".rpmnew "$f"
fi
fi

%files
%attr(751,root,root) %dir %_sysconfdir/%name
%_bindir/scp
%_bindir/ssh-keygen
%_man1dir/scp.*
%_man1dir/ssh-keygen.*
%doc ChangeLog.bz2 CHANGES CREDITS LICENCE README* RFC.nroff WARNING.RNG contrib/faq.html

%files clients
%attr(751,root,root) %dir %_sysconfdir/%name
%config(noreplace) %_sysconfdir/%name/ssh_config
%config(noreplace) %_sysconfdir/X11/profile.d/*
%_bindir/rescp
%_bindir/sftp
%_bindir/slogin
%_bindir/ssh
%_bindir/ssh-add
%attr(2711,root,sshagent) %_bindir/ssh-agent
%_bindir/ssh-copy-id
%_bindir/ssh-keyscan
%_man1dir/sftp.*
%_man1dir/slogin.*
%_man1dir/ssh.*
%_man1dir/ssh-add.*
%_man1dir/ssh-agent.*
%_man1dir/ssh-copy-id.*
%_man1dir/ssh-keyscan.*
%_man5dir/ssh_config.*

%files keysign
%attr(751,root,root) %dir %_libexecdir
%_libexecdir/ssh-keysign
%_man8dir/ssh-keysign.*

%files server
%attr(755,root,root) %_controldir/sftp
%attr(751,root,root) %dir %_sysconfdir/%name
%attr(600,root,root) %config %_sysconfdir/%name/moduli
%attr(600,root,root) %config(noreplace) %verify(not size md5 mtime) %_sysconfdir/%name/sshd_config
%attr(600,root,root) %config(noreplace) %_pamdir/sshd
%attr(755,root,root) %config %_initdir/sshd
%attr(751,root,root) %dir %_sysconfdir/%name/authorized_keys*
%_sbindir/*
%attr(751,root,root) %dir %_libexecdir
%_libexecdir/sftp-server
%_man5dir/sshd_config.*
%_man8dir/sshd.*
%_man8dir/sftp-server.*

%files askpass-common
%_sysconfdir/profile.d/ssh-askpass.*
%attr(751,root,root) %dir %_libexecdir

%changelog
…
Полный changelog можно просмотреть здесь